Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: lhcdtOdAcudzpl1Yh1SHBONXhx4wkyY5N+t5yPSeIrw=
Subject key identifier: CB:AA:09:B6:2D:99:C6:29:8A:6D:7E:AF:F4:8E:C2:0D:BD:B7:18:8E
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019E1F47A6C8AA807ED63C76EAC8E405CA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0B39
Signing time: Wed 13 May 2026 03:00:49 +0000
Manifest this update: Wed 13 May 2026 03:00:49 +0000
Manifest next update: Thu 14 May 2026 03:00:49 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: gTW8Bbcy27mik1rWse48Hw71hAhfBIHS1VmIT39qsw8=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a6:c8:aa:80:7e:d6:3c:76:ea:c8:e4:05:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: May 13 03:00:49 2026 GMT
Not After : May 14 03:00:49 2026 GMT
Subject: CN=cbaa09b62d99c6298a6d7eaff48ec20dbdb7188e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:ef:e3:48:8f:5d:9c:61:ba:f9:ca:c1:8a:
56:c6:ee:25:3a:97:42:0c:ee:6d:3d:89:87:2e:86:
a1:06:4e:04:f7:0d:8c:1c:18:df:cd:65:8b:fd:14:
43:9c:32:24:ba:25:9d:0c:b1:d5:79:0e:8c:be:ab:
a5:a3:4e:8e:9e:14:81:4f:b5:6f:47:f5:a6:d8:67:
0a:a2:cd:53:ae:70:41:90:94:41:09:ba:40:c0:2e:
db:b4:ee:29:17:d0:6d:1d:5e:fd:12:ec:00:af:a7:
fd:8f:fb:34:da:9b:97:2a:d1:3b:bd:f3:71:9b:20:
09:ee:80:e7:46:c3:58:63:ee:df:a6:03:b5:a3:70:
9e:6b:c6:0d:a8:ce:c5:31:5c:65:41:ba:eb:cb:6d:
ec:43:6f:bc:08:df:36:98:f6:a8:9d:d6:59:41:1b:
5d:91:37:7a:26:a3:af:43:49:ac:ea:9e:a0:80:04:
f4:85:40:47:79:b1:46:31:e5:ce:63:8b:9b:06:31:
12:39:d7:b3:f5:b3:3b:dc:3a:1a:9d:8f:cf:17:d4:
78:0a:61:f0:ce:72:8a:17:28:59:0e:b0:b6:48:a2:
80:5a:27:56:e0:fe:dd:9a:d5:7f:4c:f2:4c:b8:01:
a3:d1:f6:34:3a:83:bc:73:2c:5a:71:2d:5d:0f:1c:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:09:B6:2D:99:C6:29:8A:6D:7E:AF:F4:8E:C2:0D:BD:B7:18:8E
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:6e:47:ad:f1:b0:6e:83:2f:d5:13:ad:f2:df:c5:f2:8a:e3:
5f:d0:2d:f3:1a:03:94:fd:dc:32:eb:cf:62:03:c3:3c:e5:bd:
31:6d:61:5d:8e:a7:86:bf:f3:38:95:1a:5d:27:11:13:9e:01:
9d:42:fa:f3:7e:96:cd:19:2f:b5:79:ba:30:a1:18:21:b9:48:
30:7a:5d:44:89:c4:48:db:53:99:1a:98:be:fe:2a:d8:c2:8d:
6d:08:aa:ff:6d:53:2b:e5:c0:3e:66:7b:3a:49:4c:cb:6a:08:
b1:da:fe:fc:7e:c1:e0:95:e6:92:5d:c6:ef:7e:6e:46:4e:d3:
f6:11:6a:af:9e:c4:fd:8b:38:9f:e9:53:70:a8:e3:7c:bb:66:
ad:4c:22:b5:a1:22:bb:f1:fb:80:ee:0f:f5:e8:df:13:04:a1:
6d:57:09:cf:ba:d3:0d:12:ab:f8:42:3e:fe:c3:d5:9c:19:d6:
e9:d9:e3:96:86:e7:10:61:c5:33:be:25:7e:6f:82:3d:85:c0:
fe:27:a6:e4:71:67:56:94:7c:99:12:0f:cf:ed:50:92:4e:7d:
27:de:8d:c2:df:50:d7:82:d0:ae:6b:c8:c8:d1:6e:45:3e:1a:
d2:4c:83:7c:fc:3b:3a:7d:63:2c:6a:63:8e:e0:b6:75:85:cc:
94:f2:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:47 2026 by rpki-client